Description
An issue was discovered in UNL-CMS 7.59. A CSRF attack can update the website settings via ?q=admin%2Fconfig%2Fsystem%2Fsite-information&render=overlay&render=overlay.
References (1)
Core 1
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/unlcms/UNL-CMS/issues/941
Scores
CVSS v3
6.5
EPSS
0.0051
EPSS Percentile
39.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Details
CWE
CWE-352
Status
published
Products (1)
unlcms/unlcms
7.59
Published
Sep 15, 2018
Tracked Since
Feb 18, 2026